397b4332e9bf82f710f2909da8a79717d02bce87c809175b7ba914a01cd6f277

Sharing

Copy URL Twitter E-mail

General

Target

397b4332e9bf82f710f2909da8a79717d02bce87c809175b7ba914a01cd6f277
Size

455KB
MD5

0705cd70deb4104e38efa3e09e4617c0
SHA1

9b94bdc00640cb82b5e0c2e70c37109520de4f84
SHA256

397b4332e9bf82f710f2909da8a79717d02bce87c809175b7ba914a01cd6f277
SHA512

86a44748d32fea68ccfd87eadf10daef82cb935e576eab64ab470c6c89af04bfae0729d09c4a1474d39f158a945320311720985e858bed8d44ca650fca756a2d
SSDEEP

12288:ZQeR7JXdl3Ilfd7x1Zk5gjWDMjU8NPK+d5ZjlGxsMMnMMMMM:ZQi0dPZxy98NLdFGxsMMnMMMMM

Score

N/A

Malware Config

Signatures

Files

397b4332e9bf82f710f2909da8a79717d02bce87c809175b7ba914a01cd6f277
.exe windows x86

55f7363121d80b51445b684fd26a9822

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCatBuffA
StrCpyNW
StrCatBuffW
wnsprintfA

user32

SendMessageA
SetFocus
GetWindowRect
DialogBoxIndirectParamA
GetDC
GetSysColor
DialogBoxParamA
SendMessageW
GetWindowLongA
DialogBoxParamW
LoadCursorA
LoadImageA
WinHelpA
ShowWindow
EnableWindow
SetCursor
CreateWindowExW
ReleaseDC
GetParent
MessageBeep
SetWindowLongA
SetDlgItemTextA
DialogBoxIndirectParamW
GetDlgItemTextA
GetDlgItem
SendDlgItemMessageA
LoadStringA
LoadBitmapA
CallMsgFilterA

shell32

ShellExecuteA

wintrust

WTHelperGetProvCertFromChain
WintrustAddActionID
WTHelperGetProvSignerFromChain
WinVerifyTrust
WTHelperCertIsSelfSigned
WintrustRemoveActionID

gdi32

SelectObject
GetTextExtentPointA
GetTextExtentPointW
DeleteObject
GetTextMetricsW
GetTextMetricsA

kernel32

HeapReAlloc
HeapAlloc
InitializeCriticalSection
InterlockedCompareExchange
QueryPerformanceCounter
GetCommandLineA
WinExec
VirtualAlloc
GetSystemTimeAsFileTime
ExitProcess
GetDateFormatA
HeapFree
DeleteCriticalSection
lstrlenA
GetTickCount
SetUnhandledExceptionFilter
GetProcAddress
FileTimeToSystemTime
UnhandledExceptionFilter
SetProcessWorkingSetSize
EnterCriticalSection
GetCurrentProcessId
lstrcmpiA
GetCurrentProcess
GetCurrentThreadId
GetLastError
CompareFileTime
TerminateProcess

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 936KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55f7363121d80b51445b684fd26a9822

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

user32

shell32

wintrust

gdi32

kernel32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 55KB - Virtual size: 936KB

.rdata Size: 158KB - Virtual size: 157KB

.reloc Size: 512B - Virtual size: 24B

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 232KB - Virtual size: 231KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 55KB - Virtual size: 936KB

.rdata
Size: 158KB - Virtual size: 157KB

.reloc
Size: 512B - Virtual size: 24B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 232KB - Virtual size: 231KB